diff --git a/content/docs/deployment/cli.mdx b/content/docs/deployment/cli.mdx
index 27f9e88e18..917f865644 100644
--- a/content/docs/deployment/cli.mdx
+++ b/content/docs/deployment/cli.mdx
@@ -455,7 +455,7 @@ os validate path/to/config   # Validate specific file
 name/action/filter references, page sources, approval approvers, security
 posture, the autonumber and view-reference lints. All of them come from one
 registry, so the list is the same on `os build` and `os lint`; see
-[The one gate, three entry points](/docs/deployment/validating-metadata#the-one-gate-three-entry-points)
+[The one gate, four doors](/docs/deployment/validating-metadata#the-one-gate-four-doors)
 for the full matrix. Every failing rule is reported in a single run rather than
 stopping at the first, so one pass shows the whole hole.
 
@@ -469,8 +469,7 @@ stopping at the first, so one pass shows the whole hole.
 - No objects defined
 - No apps or plugins defined
 - Every advisory the rule registry raised (dangling `stageField` /
-  `highlightFields` pointers, replay-unsafe seeds, ambiguous flow status,
-  deprecated visibility aliases, …)
+  `highlightFields` pointers, replay-unsafe seeds, ambiguous flow status, …)
 
 <Callout type="tip">
 `os validate`, `os build` and `os lint` share one rule registry, so a config that
diff --git a/content/docs/deployment/validating-metadata.mdx b/content/docs/deployment/validating-metadata.mdx
index 90c4cccffd..3346a6499e 100644
--- a/content/docs/deployment/validating-metadata.mdx
+++ b/content/docs/deployment/validating-metadata.mdx
@@ -346,7 +346,7 @@ Skipped, to keep false positives at zero: the same set as §8 — non-static
 values, `{...spread}` usages, relationship paths, system fields, and objects
 another package defines.
 
-## The one gate, three entry points
+## The one gate, four doors
 
 `os validate`, `os build` (alias of `os compile`) and `os lint` run the **same**
 author-time rules, from one table — `AUTHORING_RULES` in
@@ -479,7 +479,7 @@ A clean run walks the registry and reports timing:
   Config: /path/to/support-desk/objectstack.config.ts
   Load time: 21ms
   → Validating against ObjectStack Protocol...
-  → Running author-time rules (26)...
+  → Running author-time rules (38)...
   → Checking capability providers (#3366)...
   → Checking package docs (ADR-0046)...